Cyber Incident Response Consultant

About the role

Join Deloitte Cyber as a Consultant focused on crisis and incident response across enterprise, cloud, and hybrid environments. You will act as a trusted technical advisor, helping organisations respond to, investigate, and recover from complex cyber incidents.

Key responsibilities

• Lead response activities for ransomware, malware, data breach, and insider threat investigations.
• Perform triage, containment, and forensic analysis on endpoints, networks, cloud services, and identity infrastructure.
• Conduct threat hunting, log analysis, and investigations using SIEM, EDR, and network security platforms.
• Document incident timelines, indicators of compromise, findings, and remediation actions; support post‑incident reviews.
• Provide technical updates to client stakeholders, assist recovery efforts, and contribute to incident response planning and readiness.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Engineering or a related technical field.
• 3‑6 years of cybersecurity experience with at least 2 years in incident response.
• Hands‑on experience with ransomware, business email compromise, or advanced persistent threat incidents.
• Experience using SIEM platforms, forensic tools, and EDR/XDR solutions.

Required skills

• SIEM: Splunk, Microsoft Sentinel, QRadar, Chronicle
• Forensic tools: Magnet Axiom, EnCase, FTK, Volatility, X‑Ways, Autopsy
• EDR/XDR: CrowdStrike, SentinelOne, Microsoft Defender, Carbon Black
• Threat‑intelligence frameworks: MITRE ATT&CK, STIX/TAXII
• Scripting: Python, PowerShell, Bash